Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199524.roa
File: AS199524.roa (raw, json)
Hash identifier: d3asByXjmGS86RK1rCy0LihhBfbdj90gj2GzgUc7ExE=
Subject key identifier: F2:82:89:25:04:05:D8:A3:3F:38:51:52:EB:23:28:03:CC:BB:89:88
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4184F833DD83C2948A847FA897C6D392B81091A0
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199524.roa
Signing time: Fri 24 Jul 2026 19:26:22 +0000
ROA not before: Fri 24 Jul 2026 19:21:22 +0000
ROA not after: Fri 23 Jul 2027 19:26:22 +0000
asID: 199524
IP address blocks: 82.25.36.0/24 maxlen: 24
82.47.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:84:f8:33:dd:83:c2:94:8a:84:7f:a8:97:c6:d3:92:b8:10:91:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jul 24 19:21:22 2026 GMT
Not After : Jul 23 19:26:22 2027 GMT
Subject: CN=F28289250405D8A33F385152EB232803CCBB8988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:5a:a4:c1:14:04:a9:e9:39:fd:f0:3e:03:
66:10:d6:8d:f8:16:4b:3a:01:bf:3b:80:d5:41:03:
4a:55:e6:f6:a9:f7:73:0a:cf:55:e0:57:3a:bf:5d:
90:86:3a:87:8d:4a:4a:38:cd:d1:f7:34:28:0c:ad:
1d:d0:23:78:98:71:44:d5:3e:1f:87:19:b9:2d:96:
fb:14:a0:e2:dc:05:d0:94:4d:cf:e5:63:50:4a:71:
f8:3a:87:f4:b6:1d:1e:aa:da:d1:bb:05:1c:f6:7f:
d6:17:7c:d8:ef:16:41:29:ed:f2:1a:5f:64:c4:b6:
df:f4:2e:07:e7:e5:8d:05:65:c2:08:f8:43:76:54:
46:e4:3d:0e:a4:12:bb:99:07:5f:ea:91:32:63:f8:
cf:88:7e:d5:d7:17:2c:bf:d9:77:b2:69:7d:3d:50:
d5:78:7d:5f:d5:66:7f:c1:7a:34:00:3c:fa:3b:9c:
1a:df:c4:af:f0:2a:55:65:d7:4a:27:a3:4b:a3:46:
ec:e0:2c:70:d9:54:0e:ee:d1:86:5f:6a:76:17:8c:
5e:ab:fd:d7:51:74:ae:d8:10:95:fd:17:0f:03:e9:
bd:a2:5e:32:ca:74:cd:16:dc:21:fd:b4:d0:ac:c5:
34:c8:6c:cf:f7:b2:b1:8f:8f:82:c4:db:23:e8:19:
71:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:82:89:25:04:05:D8:A3:3F:38:51:52:EB:23:28:03:CC:BB:89:88
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS199524.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.25.36.0/24
82.47.180.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ae:5d:28:b9:58:26:a4:f1:07:78:b3:75:d8:68:c3:df:d3:
dd:83:58:54:08:8f:89:73:03:0d:29:e0:b6:58:e7:ee:fd:23:
df:01:76:7b:df:71:c2:89:49:7c:10:76:4b:8d:e3:db:d8:10:
44:da:4a:c2:2c:e6:c7:84:11:41:c4:51:73:48:b6:82:a4:0c:
90:1f:11:82:f1:17:9c:60:16:89:9b:be:5d:f0:02:4a:21:e8:
8c:cf:76:a2:d0:29:f2:33:5f:bd:09:5b:a1:09:39:b8:5e:4f:
c3:64:07:85:0e:19:84:37:e5:18:fb:fd:d1:50:3b:30:d2:b4:
7b:c0:5b:02:d2:c6:33:75:42:0a:27:58:e8:f7:95:24:88:92:
a9:1b:e5:ac:7e:1a:ef:ce:3a:bf:9f:55:d1:cc:d0:f4:ca:ac:
ce:66:fe:86:ba:3c:75:83:58:18:5d:73:c8:ea:8c:2c:4d:cd:
61:5d:e8:bf:31:76:93:f5:46:be:81:ab:49:d8:71:46:bb:2e:
d8:b2:4f:18:27:6e:7b:a2:a7:f4:1e:81:b3:2d:fc:a0:5d:67:
8e:81:c4:d9:19:c4:e7:0d:0a:cd:e5:44:4c:65:60:c0:df:13:
63:26:b6:6f:61:00:d3:6f:f5:31:c1:1b:4e:19:8c:e3:e3:44:
22:74:fc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:40:52 2026 by rpki-client